On Thu, 2014-03-13 at 21:24 +0000, One Thousand Gnomes wrote: > If I have CAP_SYS_RAWIO I can make arbitary ring 0 calls from userspace, > trivially and in a fashion well known and documented.
How? > You've missed a few others too - mem= (especially with exactmap) for > example. /dev/mem access is restricted, so what would this buy you? The potential to have the kernel hand over a region belonging to hardware in response to a userspace allocation? -- Matthew Garrett <[email protected]> N�����r��y����b�X��ǧv�^�){.n�+����{�y����^n�r���z���h�����&�� �G���h�(�階�ݢj"���m������z�ޖ���f���h���~�m�
